Behavioral task
behavioral1
Sample
bc724d16e4f3d180674538b6f107446b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bc724d16e4f3d180674538b6f107446b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc724d16e4f3d180674538b6f107446b_JaffaCakes118
-
Size
93KB
-
MD5
bc724d16e4f3d180674538b6f107446b
-
SHA1
d048e15bafd9d9910c2ac7afba9a540b5e87a05e
-
SHA256
f948bc841507668ecab0b72aa79a2d97a1e741a84d1406d5eeb572441e92b8e0
-
SHA512
4723290aba4f8d631089a1e15500ad601931a7d6e592ebe608a8c14d2598ba5e9981bb78bd17c3cdcc67acb35b993ee07182ecbabbef6d67fb49d19b9d5ce08e
-
SSDEEP
1536:H+gudbaUzRJX/OuWn5FIv6BHPI1skIGTMr4zKqh7LMAHiuKtFrkb7Oo2Tnouy8:eg5KPFWKvaI1zfrLMAHibt63Oo2rout
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc724d16e4f3d180674538b6f107446b_JaffaCakes118
Files
-
bc724d16e4f3d180674538b6f107446b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE